Push User account from IDM to LDAP

Question

Hi,
I need to push the new users created in IDM to LDAP. I created a rule library specifying the attributes that need to bu pushed and am calling that library in create user workflow.
However, the new user and related attributes are not being pushed to LDAP. Can somebody point out the mistake in my code?
Here is the Rule Library:
<Extension>
<Library>
<Comments>rule library that contains all rules</Comments>
<Rule name='RULE_create_LDAP_Acct'>
<RuleArgument name=''/>
<block trace='true'>
<set name='user.accounts[LDAP1].firstname'>
<ref>firstname</ref>
</set>
<set name='user.accounts[LDAP1].lastname'>
<ref>lastname</ref>
</set>
<set name='user.accounts[LDAP1].accountId'>
<ref>accountId</ref>
</set>
<set name='user.accounts[LDAP1].email'>
<ref>user.waveset.email</ref>
</set>
</block>
</Rule>
</Library>
</Extension>
<MemberObjectGroups>
<ObjectRef type='ObjectGroup' id='#ID#Top' name='Top'/>
</MemberObjectGroups>
</Configuration>
Here is the change i made to provision activity in create user workflow:
<Activity id='4' name='Provision'>
<Comments>&#xA; Perform the standard Lighthouse provisioning process.&#xA; </Comments>
<Action id='0' process='Data Transformation'>
<Comments>Apply any defined data transformations</Comments>
<Argument name='ruleName'>
<ref>transforms.preProvisionRule</ref>
</Argument>
<Argument name='formName'>
<ref>transforms.preProvisionForm</ref>
</Argument>
</Action>
<Action id='1'>
<expression>
<cond>
<eq>
<ref>sunrise.createResourceAccounts</ref>
<s>true</s>
</eq>
<block>
<set name='options.targets'>
<List>
<String>LDAP1</String>
</List>
</set>
<set name='user.waveset.resources'>
<filterdup>
<appendAll>
<ref>user.waveset.resources</ref>
<list>
<s>LDAP1</s>
</list>
</appendAll>
</filterdup>
</set>
</block>
</cond>
</expression>
</Action>
<Action id='2' name='Create LDAP Account'>      
<rule name='RULE-LIB-xxx:RULE_create_LDAP_Acct'>
<argument name ='firstname' value='$(firstname)'/>
<argument name='lastname' value='$(lastname)'/>
<argument name='email' value='(email)'/>
</rule>
</Action>
Any help is appreciated.
Thanks,

Answer 1

Ankush,
I am having this problem only when trying to assign LDAP to a user through the WF. No problems whatsoever while doing it manually.
I tried creating a contained users under people and modified identity template accordingly. But no luck..the same Error Code 32.
I have 3 required attributes in the mapping, cn,sn and uid. The obejct classes i ahve are top,person,organizational person and inetOrgPerson.
The only modification i made to create user WF is add this action under provision:
<Action id='2' name='Create LDAP Account'>      
<rule name='Create LDAP Account'>
<argument name ='firstname' value='$(firstname)'/>
<argument name='lastname' value='$(lastname)'/>
<argument name='email' value='$(email)'/>
</rule>
</Action>
The Rule is as follows:
<block>
<set name='user.waveset.accountId'>
<ref>accountId</ref>
</set>
<set name='user.accounts[Lighthouse].accountId'>
<ref>accountId</ref>
</set>
<set name='user.waveset.resources'>
<filterdup>
<appendAll>
<ref>user.waveset.resources</ref>
<s>LDAP1</s>
</appendAll>
</filterdup>
</set>
<set name='user.waveset.assignedLhPolicy'>
<s>LighthouseAccountPolicy</s>
</set>
<set name='user.waveset.firstname'>
     <ref>firstname</ref>
</set>
<set name='user.waveset.lastname'>
     <ref>lastname</ref>
</set>
<!-- <set name='user.waveset.email'>
     <ref>email</ref>
</set> -->
<set name='user.waveset.organization'>
<s>Top</s>
</set>
<set name='user.waveset.accounts[LDAP1].created'>
<s>true</s>
</set>
</block>
</Rule>
Please let me know if something is wrong with this.
Thanks,